Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/aa/ee5f33-b1eb-4d08-9e87-2ed7a715f8d7/1/1j-OQvuEQqSKfUfvTAtuFHUUv8Q.mft
File: 1j-OQvuEQqSKfUfvTAtuFHUUv8Q.mft (raw, json)
Hash identifier: QY3yGqiRBZcCVTqEWvN7YdjoaA43a5RJPo/y/62Qo/w=
Subject key identifier: 98:C6:5F:F6:5E:60:7E:0E:97:25:E6:8B:09:08:59:72:47:02:F4:3E
Authority key identifier: D6:3F:8E:42:FB:84:42:A4:8A:7D:47:EF:4C:0B:6E:14:75:14:BF:C4
Certificate issuer: /CN=d63f8e42fb8442a48a7d47ef4c0b6e147514bfc4
Certificate serial: 019A522C47E630E2499C0E4B4455AD880D53
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/1j-OQvuEQqSKfUfvTAtuFHUUv8Q.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/aa/ee5f33-b1eb-4d08-9e87-2ed7a715f8d7/1/1j-OQvuEQqSKfUfvTAtuFHUUv8Q.mft
Manifest number: 0E5A
Signing time: Wed 05 Nov 2025 04:00:24 +0000
Manifest this update: Wed 05 Nov 2025 04:00:24 +0000
Manifest next update: Thu 06 Nov 2025 04:00:24 +0000
Files and hashes: 1: 1j-OQvuEQqSKfUfvTAtuFHUUv8Q.crl (hash: faAGUO/XbKAW4VZ78GHPBPYIjIJeI94SD3b27UhPcGk=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/aa/ee5f33-b1eb-4d08-9e87-2ed7a715f8d7/1/1j-OQvuEQqSKfUfvTAtuFHUUv8Q.crl
rsync://rpki.ripe.net/repository/DEFAULT/aa/ee5f33-b1eb-4d08-9e87-2ed7a715f8d7/1/1j-OQvuEQqSKfUfvTAtuFHUUv8Q.mft
rsync://rpki.ripe.net/repository/DEFAULT/1j-OQvuEQqSKfUfvTAtuFHUUv8Q.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 06 Nov 2025 03:00:03 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:52:2c:47:e6:30:e2:49:9c:0e:4b:44:55:ad:88:0d:53
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d63f8e42fb8442a48a7d47ef4c0b6e147514bfc4
Validity
Not Before: Nov 5 04:00:24 2025 GMT
Not After : Nov 6 04:00:24 2025 GMT
Subject: CN=98c65ff65e607e0e9725e68b090859724702f43e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cb:f6:13:a3:3f:ca:f2:35:57:30:5b:70:99:5a:
d6:97:5f:c7:ef:98:27:20:aa:7d:69:e4:3b:87:40:
7a:40:0a:f8:d2:20:28:a4:bb:5b:6d:74:48:e7:de:
a1:e1:44:d3:ef:72:e5:28:ea:d1:67:41:d6:45:6b:
d4:79:07:33:82:01:c3:58:f1:33:22:ee:64:43:3c:
62:58:b5:21:ed:54:a6:d9:55:bf:6d:14:79:30:6f:
34:8b:15:cc:dc:b1:a3:ba:26:bd:1f:b8:c5:77:ac:
9e:eb:35:89:14:f5:65:0a:59:d8:17:88:22:fa:1e:
be:46:a0:0c:c7:53:61:11:ac:5f:b8:4d:db:52:d5:
01:27:fc:10:77:07:2c:ad:95:d3:e8:9a:45:18:8b:
dd:a7:33:2a:5f:76:08:ad:09:0d:e3:95:8c:13:0c:
21:04:93:6b:ac:fe:53:17:82:e7:68:0d:63:4f:02:
3c:8f:60:52:2b:1d:1b:80:89:99:1b:e7:6b:91:9f:
7e:9a:68:55:fd:0d:6b:27:0e:ed:47:0e:8f:db:12:
49:49:5c:71:5a:a8:9e:6b:c0:05:74:76:38:cf:1d:
6d:05:1d:30:fe:b1:7a:aa:8a:71:74:c2:0a:66:e6:
7a:c0:ae:0f:83:45:43:d3:a5:35:d8:d8:fc:45:d9:
ef:a9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
98:C6:5F:F6:5E:60:7E:0E:97:25:E6:8B:09:08:59:72:47:02:F4:3E
X509v3 Authority Key Identifier:
keyid:D6:3F:8E:42:FB:84:42:A4:8A:7D:47:EF:4C:0B:6E:14:75:14:BF:C4
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/1j-OQvuEQqSKfUfvTAtuFHUUv8Q.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/aa/ee5f33-b1eb-4d08-9e87-2ed7a715f8d7/1/1j-OQvuEQqSKfUfvTAtuFHUUv8Q.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/aa/ee5f33-b1eb-4d08-9e87-2ed7a715f8d7/1/1j-OQvuEQqSKfUfvTAtuFHUUv8Q.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
4a:1a:7c:90:c6:49:b5:0b:88:e6:b5:b2:29:26:ff:bc:c5:db:
7e:09:1e:d9:84:1c:11:aa:23:bc:86:7d:ac:87:88:e2:cd:4f:
03:9d:67:a9:33:b7:4d:2b:96:6e:c8:20:88:ad:11:38:20:1e:
2d:4f:86:20:0e:67:2b:fb:66:31:dd:0a:f8:c4:33:c3:bb:4e:
b9:43:9c:3f:7a:ee:2a:9a:46:91:ad:0d:bc:9c:87:48:80:22:
bb:ab:33:4a:fb:33:82:94:ec:09:d1:94:7a:60:37:a8:32:a7:
22:2f:80:ff:fa:85:47:24:37:78:5a:8c:65:8e:a8:74:89:69:
7c:b0:cd:ec:a5:25:38:22:5b:22:ae:60:ff:98:1f:92:12:3b:
ad:59:65:6a:1c:45:b4:eb:0d:7c:1e:13:9f:24:0f:1f:e3:48:
19:e5:eb:3c:61:21:37:ac:c4:bf:a8:25:0d:d3:44:a0:d7:91:
75:6f:8e:07:d9:71:f4:5b:cb:a5:82:92:25:29:62:f9:24:6f:
4c:18:57:ef:ea:65:71:c4:3e:7b:8e:a8:06:f9:0d:2e:46:36:
d6:36:b7:01:8a:34:51:f2:c0:e4:8b:88:30:c5:ca:f1:ad:17:
61:e6:f1:f5:b6:4b:16:c4:23:ce:e7:52:77:06:13:ca:ee:a8:
40:58:ca:65
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Nov 5 09:08:54 2025 by rpki-client